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AMENDMENTS TO THE CLAIMS : 

Please amend tlie claims as follows. This listing of claims will replace all prior 
versions and listings of claims in the application: 



1.-32. (Cancelled) 

33. (Currently Amended) A method for giving to at least one user access to a 
respective home operator over a communication network, said access being via an 
access network and through any of a plurality of supported visited networks, wherein at 
least one of said supported visited networks comprises a proxy/relay agent for those 
authentication requests that must be fonwarded towards an identified operator and a 
redirect agent for those authentication requests that have an unknown realm, whereby 
said at least one user is given the possibility of selecting one of said supported visited 
networks as the path for reaching said respective home operator, the method further 
comprising: 

receiving from said at least one user, user credentials at said access network, 
wherein the user credentials comprise a realm-identification comoonent : 

fonvarding said user credentials to an authentication function at said access 
network; and 

searchino in a routing table for a realm identified bv the realm-identification 
component, wherein when the realm is not included In the routing table, further 
performing the steps of: 
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redirecting to all said supported visited networks the user credentials 
whose realm-identification component does not correspond to anv realm 
identified in the routine table: 

returning from said supported visited networks to said access network 
redirect notifications as well as contact infomriation to said user's respective 
home operator: 

retrieving a set of available roaming networks for said at least one user, 
thus retrieving a list of operators holding a roaming agreement with said 
respective home operator of said at least one user; 

fooA^arding said list to said at least one user; 

receiving from said at least one user at said authentication function an 
identifier of an operator selected from said list; and 

forwarding to the operator identified by said identifier a user's 
authentication request[[;]] 

rodiroot i ng to all said oupportod v i o i tod notworko tho authont i cation requests 
whoGO roalm dooo not corr e spond to any roalm i dontifiod at said acoooo network; and 

rotuming from said supported visitod networks to said aoooss network rodiroot 
not i fications ao well as contact information to said usor 's respoot i vo homo operator . 

34.-35. (Cancelled) 

36. (Previously Presented) The method of claim 33, comprising the step of 
including the user credentials in said user's authentication request. 
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37. (Previously Presented) The method of claim 33, comprising the steps of: 
assigning to said at least one user a Network Access Identifier (NAI); and 
identifying said at least one user through the realm part of said NAI. 

38. (Previously Presented) The method of claim 33, wherein said steps of 
receiving and forwarding user credentials and retrieving a set of available roaming 
networks is perfomned only once, when a first authentication request is received by said 
authentication function in respect to a user for which no direct roaming agreements exist 
with said user's respective home operator. 

39. (Previously Presented) The method of claim 33, wherein, when said access 
network has a direct roaming agreement with said user's respective home operator, 
comprising the step of fonn^ardlng to said at least one user a list including said user's 
respective home operator only. 

40. (Previously Presented) The method of claim 33, wherein, when said access 
networi< has a direct roaming agreement with said user's respective home operator, 
comprising the step of directly fonwarding the user's authentication request to said 
user's respective home operator. 

41. (Previously Presented) The method of claim 33, comprising the step of 
proxying said user's authentication request from said operator identified by said 
identifier to said user's respective home operator. 
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42. (Previously Presented) The method of claim 33, comprising the step of 
selecting said authentication function as an Extensible Authentication Protocol (EAP) 
based function. 

43. (Previously Presented) The method of claim 33, comprising the step of 
including in at least one of said access network and said supported visited networks a 
Diameter node. 

44. (Currently Amended) The method of claim 33, comprising the step of 
including in at loaot on e of said access network and oaid oupportod vieitod notworko a 
proxy/relay agent. 

45. -47. (Cancelled) 

48. (Currently Amended) A communication network arranged for giving to at least 
one user access to a respective home operator via an access network and through any 
of a plurality of supported visited networks, wherein: 

at least one of said supported visited networks comprises a proxy/relay agent for 
those authentication requests that must be forwarded towards an identified operator, 
and a redirect agent for those authentication requests that have an unknown realm, 
whereby said at least one user is given the possibility of selecting one of said supported 
visited networks as the path for reaching said respective home operator; 

said access network has an associated authentication server, said access 
network being configured for receiving^ uoor orodontials from said at least one user^ 
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user credentials comprising a realm-identification component and fonwarding said user 

credentials to said authentication server; and 

searching in a routine table for a realm identified bvthe realm-identification 
component, wherein when the realm is not included in the routing table, further 
performing the steps of: 

redirecting to all said supported visited networks the user credentials 

whose realm-identification component does not correspond to any realm 

identified in the routing table: 

returning from said supported visited networks to said access network 

redirect notifications as well as contact information to said user's respective 

home operator: 

said authentication server being configured for retrieving a set of available 
roaming networks for said at least one user, thus retrieving a list of operators 
holding a roaming agreement with said respective home operator of said at least 
one user, and forwarding said list to said at least one user; and 

said authentication server being further configured for receiving from said 
at least one user an identifier of an operator selected from said list, and 
fon/varding to the operator identified by said identifier a user's authentication 
requestrand 

oaid oocoss network being configured for rodirooting to a l l said supported v i sited 
notworks, the authentication r e qu e sts whos e r e a l m do e s not corr e spond to any r e alm 
identifi e d at oaid aoooos notwork. said support e d visitod notworko bo i ng configurod for 
returning to oaid aocoso network rodireot notifications as w e l l as contact information to 
oaid uoor'o respectiv e homo operator . 

-6- 



Application No. 10/562,927 
Attorney Docket No. 09952.0016 

49.-50. (Cancelled) 

51. (Previously Presented) The communication network of claim 48, wherein said 
authentication server is configured for including the user credentials in said user's 
authentication request. 

52. (Previously Presented) The communication network of daim 48, wherein said 
at least one user is identified by a Network Access Identifier (NAI) and said access 
network is configured for identifying said at least one user through the realm part of said 
NAI. 

53. (Previously Presented) The communication network of claim 48, wherein said 
authentication server is configured for receiving and forwarding user credentials and 
retrieving a set of available roaming networks only once, when a first authentication 
request is received by said authentication server in respect to a user for which no direct 
roaming agreements exist with said user's respective home operator. 

54. (Previously Presented) The communication network of claim 48, wherein said 
access network has a direct roaming agreement with said user's respective home 
operator and said access network is configured for fonwarding to said at least one user 
a list including said user's respective home operator only. 
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55. (Previously Presented) The communication network of claim 48, wlierein said 
access network has a direct roaming agreement with said user's respective home 
operator and said access network is configured for directly fonwarding the user's 
authentication request to said user's respective home operator. 

56. (Previously Presented) The communication network of claim 48, wherein said 
supported visited networks are configured for proxying said user's authentication 
request from said operator identified by said identifier to said user's respective home 
operator. 

57. (Previously Presented) The communication networi^ of claim 48, wherein said 
authentication server is an Extensible Authentication Protocol (EAP) based server. 

58. (Previously Presented) The communication network of claim 48, wherein at 
least one of said access network and said supported visited networks is configured as a 
Diameter node. 

59. (Currently Amended) The communication network of claim 48, wherein at- 
loast one of said access network and said oupportod vio i tod notworko includes a 
proxy/relay agent. 

60. -62. (Cancelled) 
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63. (Previously Presented) The communication network of claim 48, In the fomi 
of an Internet Protocol (IP) network. 

64. (Currently Amended) A computer readable medium encoded with a computer 
program product loadable into a memory of at least one computer and boing onood e d 
nn n nnmpiitnr rnndnblo modium tho oomputor program product and including software 
code portions for performing the steps of any one of claims 33 or 36-44 36 4 5 . 
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